@velaro/mcp-server 0.6.96 → 0.6.98

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/mcp-server",
-  "version": "0.6.96",
+  "version": "0.6.98",
   "description": "Velaro MCP server — connect Claude and other AI agents directly to your Velaro account: KB, workflows, bots, conversations, contacts, routing, and more.",
   "type": "module",
   "bin": {

package/server.js

@@ -160,9 +160,17 @@ function avatarOverrideBody(args) {
   for (const k of ['providerSlug', 'avatarId', 'personalityPresetSlug', 'voiceId', 'displayName', 'backgroundMode', 'backgroundValue']) {
     if (args[k] !== undefined) body[k] = args[k];
   }
+  if (args.motionLevel !== undefined) body.motionLevel = parseAvatarMotionLevel(args.motionLevel);
   return body;
 }
 
+/** Closed vocabulary for avatar body motion; "" resets/inherits. Fails readably instead of a bare 400. */
+function parseAvatarMotionLevel(raw) {
+  const level = String(raw).trim().toLowerCase();
+  if (!['', 'off', 'subtle', 'natural', 'expressive'].includes(level)) throw new Error('motionLevel must be off, subtle, natural or expressive (empty string resets/inherits).');
+  return level;
+}
+
 async function messagingRequest(method, path, body) {
   if (!MESSAGING_API) throw new Error(
     'VELARO_MESSAGING_API is not configured. Add "VELARO_MESSAGING_API": "https://velaro-messaging-api-staging.azurewebsites.net" to your MCP env config.'
@@ -3386,7 +3394,7 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
   // ── AI Video Avatar management (superadmin) ────────────────────────────────
   {
     name: 'avatar_get_config',
-    description: 'Get the AI Video Avatar (Simli/D-ID/HeyGen) configuration for any customer site — provider, avatar/face ID, voice ID, enabled state, "call me" option, callback confirm window. Velaro admin only. Never returns provider API keys (Velaro uses its own master keys, never per-site).',
+    description: 'Get the AI Video Avatar (Simli/D-ID/HeyGen) configuration for any customer site — provider, avatar/face ID, voice ID, enabled state, "call me" option, callback confirm window, body motion level and strength. Velaro admin only. Never returns provider API keys (Velaro uses its own master keys, never per-site).',
     inputSchema: {
       type: 'object',
       properties: {
@@ -3412,6 +3420,8 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
         showBadge: { type: 'boolean', description: 'Show the name badge over the avatar video. Default true.' },
         sizePx: { type: 'number', description: 'Max avatar panel width in px (160-640, square). Default 360.' },
         allowVisitorCollapse: { type: 'boolean', description: 'Let visitors hide or collapse the avatar panel (up/down arrow and X). Default true.' },
+        motionLevel: { type: 'string', enum: ['', 'off', 'subtle', 'natural', 'expressive'], description: 'Body motion preset layered over the lip-sync (shoulders, breathing, head, brows). Empty string resets to the platform default (natural). Visitors with reduced-motion enabled always get a still avatar.' },
+        motionIntensityPercent: { type: 'integer', minimum: 25, maximum: 150, description: 'Body motion strength, whole percent 25-150 (default 100); multiplies every motion amplitude.' },
         maxAvatarMinutesPerMonth: { type: 'number', description: 'Monthly avatar video minutes cap for the site. Whole number 1-100000; never unlimited (0/negative rejected).' },
         maxAvatarTtsChars: { type: 'number', description: 'Monthly avatar TTS character cap (avatar_tts_chars) for the site. Whole number 1-100000000; never unlimited (0/negative rejected). Overage pricing is a platform-wide ladder, not per site.' },
       },
@@ -3461,6 +3471,7 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
         displayName: { type: 'string', description: 'Visitor-facing avatar name.' },
         backgroundMode: { type: 'string', description: 'none | color | gradient | image. "none" = explicitly no backdrop.' },
         backgroundValue: { type: 'string', description: 'Hex color, "#a,#b" gradient, or https image URL.' },
+        motionLevel: { type: 'string', enum: ['', 'off', 'subtle', 'natural', 'expressive'], description: 'Body motion preset for this group (perWorkflow ?? perGroup ?? perSite ?? natural). Empty string inherits.' },
         replace: { type: 'boolean', description: 'true = replace the whole override (omitted fields inherit) instead of merging.' },
       },
       required: ['groupId'],
@@ -3490,6 +3501,7 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
         displayName: { type: 'string' },
         backgroundMode: { type: 'string', description: 'none | color | gradient | image' },
         backgroundValue: { type: 'string' },
+        motionLevel: { type: 'string', enum: ['', 'off', 'subtle', 'natural', 'expressive'], description: 'Body motion preset for this workflow. Empty string inherits.' },
         replace: { type: 'boolean' },
       },
       required: ['workflowId'],
@@ -5333,6 +5345,11 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
     description: 'Hosted public job pages for this site: is the package included, are the pages published, and the opaque board link, sitemap, Indeed feed and Google feed URLs (the feed URLs contain a secret key). Returns { entitled, enabled, boardUrl, sitemapUrl, indeedFeedUrl, googleFeedUrl, publicApplyEnabled, eeocSelfIdAvailable, liveListings }; { entitled:false } without the package.',
     inputSchema: { type: 'object', properties: {}, required: [] },
   },
+  {
+    name: 'jobboard_applicant_accounts_status',
+    description: 'Applicant accounts on the hosted job board (applicant sign-in with an emailed one-time code, my applications, saved jobs, resume library). Returns { entitled, hostedEnabled, signInUrl, accounts, signedInLast30Days, deletionPending, savedJobs, linkedApplications } (counts only, never emails or resumes); { entitled:false } without the Job Board applicant accounts package.',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
   {
     name: 'jobboard_hosted_set',
     description: 'Publish or unpublish the hosted job pages (apply-if-present). enabled=true issues the opaque board link and feed key the first time. regenerateLink=true issues a NEW board link and every old hosted URL answers 404 (administrators only). Requires the Job Board hosted pages package (403 otherwise).',
@@ -5379,6 +5396,60 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
       required: ['applicationId', 'stage'],
     },
   },
+  // -- Job Board employers + moderation (package "job-board-employers", default OFF: 403 job_board_employers_not_entitled without it) --
+  {
+    name: 'jobboard_employers_list',
+    description: 'List the employers on this site\'s job board with status, trusted flag (first posting approved), member count, live/total listings and how many listings wait for moderation. Requires the Job board employers package (403 otherwise).',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
+  {
+    name: 'jobboard_employer_create',
+    description: 'Create an employer on the job board (name 2-200 characters, unique per site; optional verified email domain). Administrator only. Invite its first member with jobboard_employer_invite.',
+    inputSchema: {
+      type: 'object',
+      properties: { name: { type: 'string' }, verifiedDomain: { type: 'string', description: 'Optional, e.g. example.com' } },
+      required: ['name'],
+    },
+  },
+  {
+    name: 'jobboard_employer_invite',
+    description: 'Email a single-use invitation (valid 7 days) to join an employer as Owner, Recruiter (default) or Viewer. Employers manage only their own listings and applicants and never see EEO data. Administrator only; 409 if the email already belongs to another employer or the hosted board is off.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        employerId: { type: 'number' },
+        email: { type: 'string' },
+        displayName: { type: 'string' },
+        role: { type: 'string', description: 'Owner | Recruiter | Viewer (default Recruiter)' },
+      },
+      required: ['employerId', 'email'],
+    },
+  },
+  {
+    name: 'jobboard_employer_suspend',
+    description: 'Suspend an employer: its members are signed out at once and every published listing is paused (off the public board). A reason of 3-500 characters is required. Administrator only.',
+    inputSchema: { type: 'object', properties: { employerId: { type: 'number' }, reason: { type: 'string' } }, required: ['employerId', 'reason'] },
+  },
+  {
+    name: 'jobboard_employer_reactivate',
+    description: 'Reactivate a suspended employer. Its paused listings stay paused until the employer resumes them. Administrator only.',
+    inputSchema: { type: 'object', properties: { employerId: { type: 'number' } }, required: ['employerId'] },
+  },
+  {
+    name: 'jobboard_moderation_list',
+    description: 'The moderation queue: employer listings waiting for a decision (an employer\'s first posting, or any posting that matched a scam signal such as fee requests, SSN/bank requests, gift cards, wire transfers, WhatsApp-only contact). Each item carries the matched flags. Pending listings are invisible on the public board.',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
+  {
+    name: 'jobboard_moderation_approve',
+    description: 'Approve a pending employer listing: it goes live, the employer becomes trusted (later clean postings publish at once), and the decision is audited. Administrator only; 409 unless the listing is waiting for moderation.',
+    inputSchema: { type: 'object', properties: { listingId: { type: 'number' } }, required: ['listingId'] },
+  },
+  {
+    name: 'jobboard_moderation_reject',
+    description: 'Reject a pending employer listing with a reason (3-500 characters) the employer will see; the listing stays hidden and the decision is audited. Administrator only.',
+    inputSchema: { type: 'object', properties: { listingId: { type: 'number' }, reason: { type: 'string' } }, required: ['listingId', 'reason'] },
+  },
   // -- Job Board pipeline (package "job-board-pipeline", default OFF: 403 job_board_pipeline_not_entitled without it, except jobboard_pipeline_get) --
   {
     name: 'jobboard_pipeline_get',
@@ -9074,6 +9145,7 @@ async function handleTool(name, args) {
         `  Display name:    ${data.displayName || '(AI)'}`,
         `  Badge shown:     ${data.showBadge}`,
         `  Size:            ${data.sizePx}px`,
+        `  Body motion:     ${data.motionLevel || '(default: natural)'} @ ${data.motionIntensityPercent ?? 100}%`,
       ].join('\n');
     }
 
@@ -9089,6 +9161,11 @@ async function handleTool(name, args) {
       if (args.showBadge !== undefined) body.showBadge = args.showBadge;
       if (args.sizePx !== undefined) body.sizePx = args.sizePx;
       if (args.allowVisitorCollapse !== undefined) body.allowVisitorCollapse = args.allowVisitorCollapse;
+      if (args.motionLevel !== undefined) body.motionLevel = parseAvatarMotionLevel(args.motionLevel);
+      if (args.motionIntensityPercent !== undefined) {
+        if (!Number.isInteger(args.motionIntensityPercent) || args.motionIntensityPercent < 25 || args.motionIntensityPercent > 150) throw new Error('motionIntensityPercent must be a whole number between 25 and 150.');
+        body.motionIntensityPercent = args.motionIntensityPercent;
+      }
       for (const [arg, max] of [['maxAvatarMinutesPerMonth', 100000], ['maxAvatarTtsChars', 100000000]]) {
         if (args[arg] === undefined) continue;
         if (!Number.isInteger(args[arg]) || args[arg] < 1 || args[arg] > max) throw new Error(`${arg} must be a whole number between 1 and ${max} (never unlimited).`);
@@ -10857,6 +10934,10 @@ async function handleTool(name, args) {
       const r = await messagingGet('/Recruiting/Hosted');
       return JSON.stringify(r, null, 2);
     }
+    case 'jobboard_applicant_accounts_status': {
+      const r = await messagingGet('/Recruiting/Applicants');
+      return JSON.stringify(r, null, 2);
+    }
     case 'jobboard_hosted_set': {
       const body = {};
       if (args.enabled !== undefined) body.enabled = Boolean(args.enabled);
@@ -10895,6 +10976,55 @@ async function handleTool(name, args) {
       return JSON.stringify(r, null, 2);
     }
 
+    case 'jobboard_employers_list': {
+      return JSON.stringify(await messagingGet('/Recruiting/Employers'), null, 2);
+    }
+    case 'jobboard_employer_create': {
+      const name = String(args.name ?? '').trim();
+      if (name.length < 2 || name.length > 200) throw new Error('name must be 2 to 200 characters.');
+      const body = { name };
+      if (args.verifiedDomain !== undefined && String(args.verifiedDomain).trim()) body.verifiedDomain = String(args.verifiedDomain).trim();
+      return JSON.stringify(await messagingPost('/Recruiting/Employers', body), null, 2);
+    }
+    case 'jobboard_employer_invite': {
+      const id = Number(args.employerId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('employerId must be a positive integer.');
+      const email = String(args.email ?? '').trim();
+      if (!/^[^@\s]+@[^@\s]+\.[^@\s]{2,}$/.test(email)) throw new Error('email must be a valid email address.');
+      const role = ['Owner', 'Recruiter', 'Viewer'].find((r) => r.toLowerCase() === String(args.role ?? 'Recruiter').trim().toLowerCase());
+      if (!role) throw new Error('role must be Owner, Recruiter or Viewer.');
+      const body = { email, role };
+      if (args.displayName !== undefined && String(args.displayName).trim()) body.displayName = String(args.displayName).trim();
+      return JSON.stringify(await messagingPost(`/Recruiting/Employers/${id}/Invite`, body), null, 2);
+    }
+    case 'jobboard_employer_suspend': {
+      const id = Number(args.employerId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('employerId must be a positive integer.');
+      const reason = String(args.reason ?? '').trim();
+      if (reason.length < 3 || reason.length > 500) throw new Error('reason must be 3 to 500 characters.');
+      return JSON.stringify(await messagingPost(`/Recruiting/Employers/${id}/Suspend`, { reason }), null, 2);
+    }
+    case 'jobboard_employer_reactivate': {
+      const id = Number(args.employerId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('employerId must be a positive integer.');
+      return JSON.stringify(await messagingPost(`/Recruiting/Employers/${id}/Reactivate`, {}), null, 2);
+    }
+    case 'jobboard_moderation_list': {
+      return JSON.stringify(await messagingGet('/Recruiting/Moderation'), null, 2);
+    }
+    case 'jobboard_moderation_approve': {
+      const id = Number(args.listingId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('listingId must be a positive integer.');
+      return JSON.stringify(await messagingPost(`/Recruiting/Moderation/${id}/Approve`, {}), null, 2);
+    }
+    case 'jobboard_moderation_reject': {
+      const id = Number(args.listingId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('listingId must be a positive integer.');
+      const reason = String(args.reason ?? '').trim();
+      if (reason.length < 3 || reason.length > 500) throw new Error('reason must be 3 to 500 characters.');
+      return JSON.stringify(await messagingPost(`/Recruiting/Moderation/${id}/Reject`, { reason }), null, 2);
+    }
+
     case 'jobboard_move_application_stage': {
       const id = Number(args.applicationId);
       if (!Number.isInteger(id) || id <= 0) throw new Error('applicationId must be a positive integer.');